The "Standard Firewall" features refer to Mailtraq's built in IP access control found in each service. For every service, you can dictate which machines can and cannot connect, without imposing a performance drop for refusals.

The WebMail service can operate within a TLS (SSL) secure session, using X.509 certificates (which Mailtraq is capable of issuing). This is sufficiently secure to display, for example, Thawte or Verisign security logos.